spyware removal instructions

EUniverse removal

Spyware EUniverse Information
Name: EUniverse
Category: Hijacker
Date: 2003-12-03
Dangerous: Yes
EUniverse is Hijacker which is malware.
Adware supplied by eUniverse.com. KeenValue/v1 runs at startup, generates popup ads, & is the original version. KeenValue/Incredifind adds capability, through a second process: records web sites visited, so that ads may be targeted; hijacks the hosts file & redirects Netscape searches to incredifind.com; hijacks error pages & address bar searches to incredifind.com, which is then redirected to sirsearch.com; adds an Internet Explorer toolbar providing a search field directed to sirsearch.com.´PerfectNav is designed to redirect your URL typing errors to PerfectNav´s web page. This software helps keep Kazaa Media Desktop free.´ -- http://www.kazaa.com/us/terms.htm In our tests in an otherwise clean machine, using software provided by eUniverse, we found that efforts to visit www.doxdesk.com/pest/keenvalue.html were sometimes redirected to eUniverse´s servers, & we were told that the page could not be found. Page loading times are substantially slowed, as requests are redirected via eUniverse servers. Installing it is highly not recommended.
EUniverse description by publisher:
from the web site: ´ eUniverse is one of the largest entertainment & media networks on the Internet serving over 50 million subscribers each month. ... The Company´s core strategy is to provide an ever increasing suite of compelling paid products & services to its person base, thereby continuing to increase the life time value of its users who transact on the network. The Company generates revenues by both selling products & services, while also offering third party advertising on the eUniverse network.As a business, the eUniverse Network is supported by our advertising / marketing partners, who partner with us to initiate a long-term relationship with our audience. If the advertising on our site is inappropriate then it creates a negative person experience & becomes ineffective. To that end, we´re continuously soliciting the opinion of our audience on this matter & do our best to provide the most appropriate advertising to create this the best experience for everyone involved eUniverse (www.euniverse.com) is a network of Web sites (referred to hereafter as the "the eUniverse Network" or "Network" or "Site") providing diversionary entertainment, topical news, data, editorial content & on-line shopping to millions of users & subscribers on a daily basis. The Network detects the importance of safeguarding the on-line privacy of its users. The data collected from users of, & subscribers to, the various sites comprising the Network will be used in accordance with the Privacy Policy... However, this Privacy Policy does not cover web sites or web pages that you may access or link to that are outside the Network.´
This Hijacker is also known as:
eUniverse Flowgo toolbar.
eUniverse SirSearch.
KeenValue.MyFreeCursors.
PerfectNav.

>> Delete EUniverse automatically - Download Spyware Doctor

EUniverse Removal Instructions
Kill the following processes
default.exe, setup_perfectnav_1_5_5.exe, mp3.1.exe, msnappau.exe, keenvalue.exe, killkeenvalue.exe, kkv.exe, kwm.exe, senduninstallinfo.exe, sui.exe, uninstall.exe, wupdater.exe, rvupdmgr.exe, simgr.exe, updmgr.exe, keenvalueinstall.exe, tipb.exe, tipb.exe, perfectnavuninstall.exe, tipb.exe, tipb.exe, keenvalueinstall_99.exe, regw.exe, setup_flowgobar_with_track.exe, setup_incredifind_screensaver_with_track.exe, tipb.exe, uninstall.exe, ribbon_wave_animated.exe, updall2m.exe
Unregister the following DLLs and reboot
appproperties.dll.
perfectnav.dll in Program Files\bho\
iesliderwin32.dll, kvlhookwin.dll in Program Files\common files\keenvalue\
flgobar.dll in Program Files\flowgobar\toolbar\
bho.dll, incfindbho.dll, incfindbho150c.dll, incfin~1.dll in Program Files\incredifind\bho\
incfin~2.dll in Program Files\incred~1\bho\
perfectnav.dll, perfectnav150.dll, perfectnav150c.dll, perfectnavbho.dll, perfec~1.dll, perfec~2.dll in Program Files\perfectnav\bho\
perfectnav150.dll, perfectnav150c.dll, perfectnavbho.dll, perfec~1.dll, perfec~2.dll in Program Files\perfec~1\bho\
pwrsbikd.dll, pwrstlbr.dll, pwrswmda.dll in Program Files\powersearch\toolbar\
pwrswmda.dll in Program Files\powersoft\toolbar\
pwrs0102.dll in Program Files\powers~1\toolbar\
flgobar.dll, incfindbho.dll, infobar.dll, perfectnavbho.dll, pwrs0102.dll, pwrs0104.dll, pwrs0108.dll, pwrs0rbi.dll, pwrsaimf.dll, pwrsbikd.dll, pwrsc032.dll, pwrscuz3.dll, pwrscznc.dll, pwrsqsim.dll, pwrswmda.dll, searchbr.dll in Windows\system32\
flgobar.dll, incfindbho.dll, infobar.dll, perfectnavbho.dll, pwrs0102.dll, pwrs0104.dll, pwrs0108.dll, pwrs0rbi.dll, pwrsaimf.dll, pwrsbikd.dll, pwrsc032.dll, pwrscuz3.dll, pwrscznc.dll, pwrsqsim.dll, pwrswmda.dll, searchbr.dll in Windows\system\
Delete these registry entries
HKEY_CLASSES_ROOT\accent-graphics.powersearch.2.0
HKEY_CLASSES_ROOT\bho.eunivbho.1
HKEY_CLASSES_ROOT\bho.eunivbho.1\clsid
HKEY_CLASSES_ROOT\bho.eunivbho\clsid
HKEY_CLASSES_ROOT\bho.eunivbho\curver
HKEY_CLASSES_ROOT\bho.incredifindbho
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\keenvalue
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run\updmgr
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\flowgobar\displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\flowgobar\uninstallstring
HKEY_CLASSES_ROOT\typelib\{dfaba77c-f8bb-4ab9-bed7-7d48ae103e24}
HKEY_CLASSES_ROOT\xbtb03439.ietoolbar
HKEY_CLASSES_ROOT\xbtb03439.xbtb03439.1
HKEY_LOCAL_MACHINE\software\incredifind\bho\redirecturls\dnsnotfound
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{5d60ff48-95be-4956-b4c6-6bb168a70310}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{a045dc85-fc44-45be-8a50-e4f9c62c9a84}
HKEY_CLASSES_ROOT\toolband.xbtb03439
HKEY_CLASSES_ROOT\typelib\{d737944e-4270-4774-b3ce-062fa7369a23}
HKEY_CLASSES_ROOT\typelib\{dcb709b4-4142-411a-8e9f-f265ae2b7bde}
HKEY_CLASSES_ROOT\typelib\{de289bfa-737b-4abb-a4ec-f8753551b875}
HKEY_LOCAL_MACHINE\software\incredifind\bho\redirecturls\urltranslation
HKEY_LOCAL_MACHINE\software\incredifind\uid
HKEY_LOCAL_MACHINE\software\keenvalue
HKEY_LOCAL_MACHINE\software\keenvalue\cid
HKEY_LOCAL_MACHINE\software\keenvalue\exename
HKEY_LOCAL_MACHINE\software\keenvalue\install_dir
HKEY_LOCAL_MACHINE\software\keenvalue\installdate
HKEY_LOCAL_MACHINE\software\keenvalue\puid
HKEY_LOCAL_MACHINE\software\keenvalue\versionnumber
HKEY_LOCAL_MACHINE\software\microsoft\code store database\distribution units\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-a08d-8f6fa787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-a08e-8e1ca787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-a1e4-ea6fa787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-a68e-8e1ca787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-aa8e-8e1ca787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-c0fc-f76fa694bf2e}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-c0ff-fd63b29bb37d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-c0ff-fd63b399bc7d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-d1f0-e56fa787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-d3fa-f27ba787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-d4f3-f66da787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-dbfc-ed1ca787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\toolbar\{4e7bd74f-2b8d-469e-dff7-ec7da787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\internet explorer\urlsearchhooks\{5d60ff48-95be-4956-b4c6-6bb168a70310}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{00d6a7e7-4a97-456f-848a-3b75bf7554d7}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{01cd4dda-166d-4831-a373-accc27e1bb9d}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{0428ffc7-1931-45b7-95cb-3cbb919777e1}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{269b6797-664e-48aa-b283-b012bdf6e525}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-c0fc-f76fa694bf2e}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-dff7-ec7da787ad2d}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{4fc95edd-4796-4966-9049-29649c80111d}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{5d60ff48-95be-4956-b4c6-6bb168a70310}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\browser helper objects\{a045dc85-fc44-45be-8a50-e4f9c62c9a84}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/about.html\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/basis.xml\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/error.html\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/logo.bmp\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/nav.bmp\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/options.html\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/powersearch_toolbar.dll
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/toolbar.crc\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/version.txt\{5629aaa8-dad0-493d-b8a7-fe3e0b06be37}
HKEY_LOCAL_MACHINE\software\perfectnav\bho\redirecturls\dnsnotfound
HKEY_LOCAL_MACHINE\software\perfectnav\bho\redirecturls\urltranslation
HKEY_LOCAL_MACHINE\software\perfectnav\uid
HKEY_LOCAL_MACHINE\software\updater
HKEY_LOCAL_MACHINE\software\updmgr
HKEY_LOCAL_MACHINE\software\updmgr\{7ee60cf1-2dff-41b5-91c9-9c1c518053fc}
HKEY_LOCAL_MACHINE\software\updmgr\cid
HKEY_LOCAL_MACHINE\software\updmgr\exename
HKEY_LOCAL_MACHINE\software\updmgr\install_dir
HKEY_LOCAL_MACHINE\software\updmgr\installdate
HKEY_LOCAL_MACHINE\software\updmgr\lastupdateattempt
HKEY_LOCAL_MACHINE\software\updmgr\puid
HKEY_LOCAL_MACHINE\software\updmgr\versionnumber
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\jalapeno screensaver\displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\jalapeno screensaver\displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\jalapeno screensaver\uninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\keenvalue
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\keenvalue\displayname
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\keenvalue\uninstallstring
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\powersearch\displayicon
HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\uninstall\xbtb03439.xbtb03439toolbar
HKEY_LOCAL_MACHINE\software\perfectnav
HKEY_LOCAL_MACHINE\software\perfectnav\bho\homepage\defaultiehomepage
HKEY_LOCAL_MACHINE\software\perfectnav\bho\installguid
HKEY_LOCAL_MACHINE\software\perfectnav\bho\redirecturls\4
HKEY_LOCAL_MACHINE\software\perfectnav\bho\redirecturls\404
HKEY_LOCAL_MACHINE\software\incredifind\bho\redirecturls\4
HKEY_LOCAL_MACHINE\software\incredifind\bho\redirecturls\404
HKEY_CLASSES_ROOT\bho.perfectnavbho
HKEY_CLASSES_ROOT\clsid\{00d6a7e7-4a97-456f-848a-3b75bf7554d7}
HKEY_CLASSES_ROOT\clsid\{03fde7ea-c8c4-413f-bea1-f8c1b8b39ea6}
HKEY_CLASSES_ROOT\clsid\{0428ffc7-1931-45b7-95cb-3cbb919777e1}
HKEY_CLASSES_ROOT\clsid\{08d536e8-06f5-458f-b5d1-e975d2da08db}
HKEY_CLASSES_ROOT\clsid\{0ec7cf46-c5b4-480c-8f94-eb34b98ccf44}
HKEY_CLASSES_ROOT\clsid\{17127a1c-1c1b-4430-b042-e1ca653d68e2}
HKEY_CLASSES_ROOT\clsid\{1ae63cf9-7c7a-49c8-8475-961ddd2b230a}
HKEY_CLASSES_ROOT\clsid\{1d4ee8ca-9b69-4c8f-8e7b-3e2940b329fa}
HKEY_CLASSES_ROOT\clsid\{269b6797-664e-48aa-b283-b012bdf6e525}
HKEY_CLASSES_ROOT\clsid\{2b54bd2f-78c0-4eaf-8347-7f37454fc61d}
HKEY_CLASSES_ROOT\clsid\{450a8754-6700-4170-8263-252e9a86de06}
HKEY_CLASSES_ROOT\clsid\{47801270-3ce6-434f-8e71-75b7e0cd64b2}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a08d-8f6fa787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a08e-8e1ca787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a1e4-ea6fa787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-a68e-8e1ca787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-aa8e-8e1ca787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0fc-f76fa694bf2e}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0ff-fd63b29bb37d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-c0ff-fd63b399bc7d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d1f0-e56fa787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d3fa-f27ba787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d4f3-f66da787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-dbfc-ed1ca787ad2d}
HKEY_CLASSES_ROOT\clsid\{4e7bd74f-2b8d-469e-dff7-ec7da787ad2d}
HKEY_CLASSES_ROOT\clsid\{4fc95edd-4796-4966-9049-29649c80111d}
HKEY_CLASSES_ROOT\clsid\{5154cbed-e3ea-4bf6-90c9-32776282076b}
HKEY_CLASSES_ROOT\clsid\{57c469e8-923a-4623-bc67-d9e18c97a2ed}
HKEY_CLASSES_ROOT\clsid\{58a7073d-4ec4-46a9-bdbd-fddcc47544ee}
HKEY_CLASSES_ROOT\clsid\{5d60ff48-95be-4956-b4c6-6bb168a70310}
HKEY_CLASSES_ROOT\clsid\{7250994f-210d-4abc-8c4d-b2c014529fd8}
HKEY_CLASSES_ROOT\clsid\{7852e0ff-f138-434e-bc32-760d05debb33}
HKEY_CLASSES_ROOT\clsid\{7e4de558-ebd9-4373-a34c-523d23b9eddb}
HKEY_CLASSES_ROOT\clsid\{a045dc85-fc44-45be-8a50-e4f9c62c9a84}
HKEY_CLASSES_ROOT\clsid\{af60118d-901b-4add-97d8-1676ec3a7cea}
HKEY_CLASSES_ROOT\clsid\{bbbe1c1a-89f7-4af6-abd1-f8fbcfa47408}
HKEY_CLASSES_ROOT\clsid\{c14b4055-a29b-420c-9d24-71c04956189c}
HKEY_CLASSES_ROOT\clsid\{c3516ef2-41d5-4e97-8688-77ada93fb0eb}
HKEY_CLASSES_ROOT\clsid\{c6a02de1-73ef-463a-8566-bd7af8b63f88}
HKEY_CLASSES_ROOT\clsid\{ce6e551b-b8f9-4b24-81fd-59d9162da495}
HKEY_CLASSES_ROOT\clsid\{db0aad08-ca9f-4c1e-b4e1-ad3d63ee20f9}
HKEY_CLASSES_ROOT\clsid\{dcb709b4-4142-411a-8e9f-f265ae2b7bde}
HKEY_CLASSES_ROOT\clsid\{dfaba77c-f8bb-4ab9-bed7-7d48ae103e24}
HKEY_CLASSES_ROOT\flgobar.flgobar
HKEY_CLASSES_ROOT\interface\{0d5cc8ae-0bb0-49c3-ba33-ba4508ea43cc}
HKEY_CLASSES_ROOT\interface\{8b8f6968-2f24-41e3-b653-e9613226f14d}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{00d6a7e7-4a97-456f-848a-3b75bf7554d7}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{269b6797-664e-48aa-b283-b012bdf6e525}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-c0fc-f76fa694bf2e}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4e7bd74f-2b8d-469e-dff7-ec7da787ad2d}
HKEY_CLASSES_ROOT\software\microsoft\windows\currentversion\explorer\browser helper objects\{4fc95edd-4796-4966-9049-29649c80111d}
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
HKEY_CURRENT_USER\software\microsoft\internet explorer\toolbar\webbrowser\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks\{269b6797-664e-48aa-b283-b012bdf6e525}
HKEY_CURRENT_USER\software\microsoft\internet explorer\urlsearchhooks\{a045dc85-fc44-45be-8a50-e4f9c62c9a84}
HKEY_CURRENT_USER\software\xbtb03439\toolbar
HKEY_LOCAL_MACHINE\interface\{eabbb49a-4d7b-415b-8250-15c3b854e9ff}
HKEY_LOCAL_MACHINE\software\{f08555af-9cc3-11d2-aa8e-000000000000}
HKEY_LOCAL_MACHINE\software\classes\bho.incredifindbho
HKEY_LOCAL_MACHINE\software\classes\bho.incredifindbho\clsid
HKEY_LOCAL_MACHINE\software\classes\bho.incredifindbho\curver
HKEY_LOCAL_MACHINE\software\classes\bho.perfectnavbho
HKEY_LOCAL_MACHINE\software\classes\bho.perfectnavbho\clsid
HKEY_LOCAL_MACHINE\software\classes\bho.perfectnavbho\curver
HKEY_LOCAL_MACHINE\software\classes\clsid\{00d6a7e7-4a97-456f-848a-3b75bf7554d7}
HKEY_LOCAL_MACHINE\software\classes\clsid\{01cd4dda-166d-4831-a373-accc27e1bb9d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{0428ffc7-1931-45b7-95cb-3cbb919777e1}
HKEY_LOCAL_MACHINE\software\classes\clsid\{269b6797-664e-48aa-b283-b012bdf6e525}
HKEY_LOCAL_MACHINE\software\classes\clsid\{30402ff4-3e71-4a1c-9b4b-1cd3486a9fb2}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a08d-8f6fa787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a08e-8e1ca787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a1e4-ea6fa787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-a68e-8e1ca787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-aa8e-8e1ca787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0fc-f378a787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0fc-f76fa694bf2e}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0ff-fd63b29bb37d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-c0ff-fd63b399bc7d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d1f0-e56fa787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d3fa-f27ba787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d4f3-f66da787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-d6f5-f66ea787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-dbfc-ed1ca787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4e7bd74f-2b8d-469e-dff7-ec7da787ad2d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{4fc95edd-4796-4966-9049-29649c80111d}
HKEY_LOCAL_MACHINE\software\classes\clsid\{5d60ff48-95be-4956-b4c6-6bb168a70310}
HKEY_LOCAL_MACHINE\software\classes\clsid\{a045dc85-fc44-45be-8a50-e4f9c62c9a84}
HKEY_LOCAL_MACHINE\software\classes\interface\{4828c95f-c5db-4ab6-a945-8d8ec44b98a8}
HKEY_LOCAL_MACHINE\software\classes\interface\{4e570f74-deee-4fcf-b960-feefa4b8c6fc}
HKEY_LOCAL_MACHINE\software\classes\interface\{8b8f6968-2f24-41e3-b653-e9613226f14d}
HKEY_LOCAL_MACHINE\software\classes\typelib\{cde442a3-dc2c-467e-a311-b4bc775d86c5}
HKEY_LOCAL_MACHINE\software\classes\typelib\{de289bfa-737b-4abb-a4ec-f8753551b875}
HKEY_LOCAL_MACHINE\software\euniverse
HKEY_LOCAL_MACHINE\software\euniverse\bho\homepage\defaultiehomepage
HKEY_LOCAL_MACHINE\software\euniverse\bho\installguid
HKEY_LOCAL_MACHINE\software\euniverse\bho\redirecturls\404
HKEY_LOCAL_MACHINE\software\euniverse\bho\redirecturls\dnsnotfound
HKEY_LOCAL_MACHINE\software\euniverse\bho\redirecturls\urltranslation
HKEY_LOCAL_MACHINE\software\euniverse\vbarry\1.0\birth_day
HKEY_LOCAL_MACHINE\software\euniverse\vbarry\1.0\birth_month
HKEY_LOCAL_MACHINE\software\euniverse\vbarry\1.0\birth_year
HKEY_LOCAL_MACHINE\software\euniverse\vbarry\1.0\firstname
HKEY_LOCAL_MACHINE\software\incredifind
HKEY_LOCAL_MACHINE\software\incredifind\bho\homepage\defaultiehomepage
HKEY_LOCAL_MACHINE\software\incredifind\bho\installguid
Remove the following files
2004-09-20 190218.txt, adult.lnk, alchem.pnf, appproperties.dll, data1.dat, data2.dat, default.exe, default.inf, euniverse.txt, info from detections.txt, keenvaluelog.txt, mp3.1.exe, msnappau.exe, polmx3.inf, pwrs0108tb0.cfg, ribbon_wave_animated.exe, rundll32.exe-35bb92d4.pf, rvupdmgr.exe-339316b9.pf, setup.exe-04524813.pf, setup.exe-05bec0e1.pf, setup_incredifind_1_5_5.exe-0786c3d7.pf, setup_perfectnav_1_5_5.exe-0290023e.pf, simgr.exe-09f5e895.pf, taskmgr.exe-20256c55.pf, template.nsi, twaintec.pnf, twtini.inf, twtini.pnf, twunk001.mtx, updall2m.exe, updmgr.exe-1ef13741.pf, updmgrinstall_110.exe-12e2776f.pf.
setup_perfectnav_1_5_5.exe in Desktop\
perfectnav.dll in Program Files\bho\
iesliderwin32.dll, keenvalue.exe, killkeenvalue.exe, kkv.exe, kv001.dat, kv002.dat, kv099.dat, kvlhookwin.dll, kwm.exe, mapping.xml, mapping.zip, senduninstallinfo.exe, sui.exe, uninstall.exe in Program Files\common files\keenvalue\
wupdater.exe in Program Files\common files\keenware\
configure screensaver.lnk, uninstall.lnk in Program Files\Common Files\screensavers\jalapeno\
rvupdmgr.exe, simgr.exe, updmgr.exe in Program Files\common files\updmgr\
keenvalueinstall.exe in Program Files\crazymates\
flgobar.dll, tipb.exe in Program Files\flowgobar\toolbar\
bho.dll, incfindbho.dll, incfindbho150c.dll, incfin~1.dll, tipb.exe in Program Files\incredifind\bho\
incfin~2.dll in Program Files\incred~1\bho\
perfectnavuninstall.exe in Program Files\kazaa\
perfectnav.dll, perfectnav150.dll, perfectnav150c.dll, perfectnavbho.dll, perfec~1.dll, perfec~2.dll, tipb.exe in Program Files\perfectnav\bho\
perfectnav150.dll, perfectnav150c.dll, perfectnavbho.dll, perfec~1.dll, perfec~2.dll in Program Files\perfec~1\bho\
pwrsbikd.dll, pwrstlbr.dll, pwrswmda.dll, tipb.exe in Program Files\powersearch\toolbar\
pwrswmda.dll in Program Files\powersoft\toolbar\
pwrs0102.dll in Program Files\powers~1\toolbar\
keenvalueinstall_99.exe, regw.exe, setup_flowgobar_with_track.exe, setup_incredifind_screensaver_with_track.exe, tipb.exe, uninstall.exe in Program Files\screensavers\jalapeno\
keenvalue.lnk in startupfolder+\
keenvalue.lnk in Windows\start menu\programs\startup\
flgobar.dll, incfindbho.dll, infobar.dll, jalapeno.scr, perfectnavbho.dll, pwrs0102.dll, pwrs0104.dll, pwrs0108.dll, pwrs0rbi.dll, pwrsaimf.dll, pwrsbikd.dll, pwrsc032.dll, pwrscuz3.dll, pwrscznc.dll, pwrsqsim.dll, pwrswmda.dll, searchbr.dll in Windows\system32\
flgobar.dll, incfindbho.dll, infobar.dll, perfectnavbho.dll, pwrs0102.dll, pwrs0104.dll, pwrs0108.dll, pwrs0rbi.dll, pwrsaimf.dll, pwrsbikd.dll, pwrsc032.dll, pwrscuz3.dll, pwrscznc.dll, pwrsqsim.dll, pwrswmda.dll, searchbr.dll in Windows\system\
Remove the following directories
Program Files\bho
Program Files\common files\updater
Program Files\common files\updmgr
Program Files\perfec~1\bho
Program Files\perfectnav
Program Files\perfectnav\bho
Program Files\powersearch
Program Files\powersoft\toolbar

Bookmark EUniverse page

 Previous Spyware: Remove Eugenic Password Stealer 5.0 Next Spyware: Remove EUniverse.IncrediFind